Malicious code in teagood-nalikami49 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bebc0b7bbac0fc873a4f73db52b1ed9f35cec636964862586f26386fe03c8fe7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-156580 Malicious code in intan-68 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 838d05bd2206a1db10ddff3753181f982e5b896026fd487e0da153d4ec23b088 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152582 Malicious code in alvito-poke9 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9385cce81cd938ac5ac40dd42a9d1d1224afec900faa6e9dfd11a67ad8d1f77d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in icha-26 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0af3e0669a7f930e270b69f4af0621c8e3e309816b6e512e523c119cb48c80c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuza75 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector de90a7e4b0aa306f036dde913f93ff092e6f01c2375a6e65121f0b2a0059bca0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in aiboa-mioliupe-auagasita (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e20675ff85c14eee27f23ac16716e744d137ef3de4cb1a75ff5649626b2be54e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-159471 Malicious code in manadsi-soaf-naisop (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a676f3b37c4461c639c4abae721336a9bfcfb1f524ceb6896cd61aa6d95b5204 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153787 Malicious code in bintang-tea38 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f72a3d16312f1baba98602441e2c08359ffb1393cd6485540450da639b70a6ce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163660 Malicious code in nudalea-fofiari-agomi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 07b79ddccebf628aa517032eb2420ce52f383682d928cea66e2e4b9ab48069aa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in fusion-umbra-farout-unuk (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2276a1acac285c4c61c33b38733d0141742a73f31ba16f4d787ec835a352f2d9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in altair-xerxes-postcss-postgres (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fc34032f91ad101ff579e2d9baf7bb1b8c4b5ed7dd11e110b66f1c2a838d571 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in izar-thuban-lacerta-remark (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c26066cdf7ca11aec8c88de6d30f536721e786cffa0b9f924a5dffbff5bfc56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vulcan-scripts-leda-websockets (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fab0ee40b5f0054f0f245c73295e76c8cba5d51b98bf5c7313397217d638b3e7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148476 Malicious code in taurus-phenomic-forever-loglevel (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 17e64be3ffd5563216dd100283bd77ee03edb1abf07974d1854daf010e063e3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in restart-tailwindcss-dynamo-deneb (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8b0c39532693cc4e6a18279726a197b967b08a795b72a474e2b2678b46a3f5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vega-chariklo-oberon-scripts (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e097682e36630b237386c15288de031a936baf46e72c3942302e068560fcf01d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-141658 Malicious code in docusaurus-cressida-vuetify-cz-conventional-changelog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 16d307e1b33fa1f7f77aae72aa9f324c6b1a79457a5786e8ff424ea0338bf9b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139285 Malicious code in aldebaran-query-slidev-commitlint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e5cfed5132e8d320f4fb2fb99af73bb8777c499543b18594cfcbf201b4625eda This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-139032 Malicious code in spotless-chocolate-dog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b77cdb69ac24717d9ff3525f4f532b4a27f5ea34961c3ea1c4ff57d9ac22fbf0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in erwin-pecel16-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e727dc0bce301d0549dd4e1138f73705bfba169c4dad7fc6489b160d85f72d9b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...